Snort mailing list archives
Re: porn rules
From: "Tudor Panaitescu" <tpanaitescu () colorcon com>
Date: Mon, 25 Feb 2002 16:26:34 -0500
It can be users checking their webmail accounts (especially hotmail.com) and
actually reading spam with porn invitations. Check out the addresses (dig,
traceroute etc.) to see where they are going. It may be users surfing porn as
well ... the destination address tells you.
Tudor
Ralf Hildebrandt <Ralf.Hildebrandt () charite de> on 02/25/2002 03:20:10 PM
To: snort-users () lists sourceforge net
cc: (bcc: Tudor Panaitescu/ColorconUS)
Subject Re: [Snort-users] porn rules
:
On Mon, Feb 25, 2002 at 02:46:19PM -0500, Basil Saragoza wrote:
Enabled porn rules, just to see what is this, and now I have a lot of porn-related alerts. What is the meaning of porn rules? Are they attacks or just alerts on ads sent to my local network?
It's somebody surfing for p0rn. -- Ralf Hildebrandt (Im Auftrag des Referat V A) Ralf.Hildebrandt () charite de Charite Campus Virchow-Klinikum Tel. +49 (0)30-450 570-155 Referat V A - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 OpenVMS is today what Microsoft wants Windows NT v8.0 to be! _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- porn rules Basil Saragoza (Feb 25)
- Re: porn rules Ralf Hildebrandt (Feb 25)
- <Possible follow-ups>
- Re: porn rules Tudor Panaitescu (Feb 25)